Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Kimsuky APT group has launched a sophisticated spear-phishing campaign using AI-generated deepfake military ID cards to target South Korean defense institutions. The attack impersonates military employee ID issuance processes and exploits ChatGPT to create convincing fake ID images. The malware employs obfuscated batch files and AutoIt scripts to evade detection, connecting to command and control servers for further payload deployment. The campaign demonstrates the evolving tactics of state-sponsored threat actors in leveraging AI technologies for cyber espionage. Analysis reveals connections to previous Kimsuky operations targeting unification researchers and government agencies, highlighting the persistent nature of the threat.

The AI-Driven Deepfake Military ID Fraud Campaign is a sophisticated spear-phishing operation attributed to the Kimsuky advanced persistent threat (APT) group, targeting South Korean defense institutions. This campaign leverages AI technologies, specifically ChatGPT, to generate highly convincing deepfake military ID cards that impersonate legitimate military employee ID issuance processes. The use of AI-generated deepfakes marks an evolution in social engineering tactics, increasing the likelihood of successful phishing by deceiving targets with realistic forged credentials. The malware payloads delivered through this campaign utilize obfuscated batch files and AutoIt scripts, techniques designed to evade traditional detection mechanisms. Once executed, the malware establishes connections to command and control (C2) servers to download and deploy additional malicious payloads, enabling further compromise and espionage activities. The campaign is linked to previous Kimsuky operations targeting unification researchers and government agencies, underscoring the persistent and targeted nature of this threat actor. The attack techniques align with several MITRE ATT&CK tactics and techniques, including spear-phishing (T1566), obfuscated files (T1027), execution through batch scripts (T1059.001), and use of AutoIt scripts (T1218.011). The campaign demonstrates the increasing sophistication of state-sponsored cyber espionage groups in exploiting AI to enhance deception and evade detection.

Detailed information about AI-Driven Deepfake Military ID Fraud Campaign. Get real-time updates, technical details, and mitigation strategies.

AI-Driven Deepfake Military ID Fraud Campaign - Live Threat Intelligence - Threat Radar | OffSeq.com

AI-Driven Deepfake Military ID Fraud Campaign

Threats Tagged 'deepfake'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'deepfake'

Lead Pen Test Professional